General
- Target 2026-08-10_85eae18403eec58cd425725ca0d3fe0b_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 10.0MB
- Sample260810-csad4sttc1
- SHA256 48640124ba43d5868cae40e6bbee814141385cb0c0b65321e06ba24fdde6ff66
- MD5 85eae18403eec58cd425725ca0d3fe0b
- SHA1 02c0675acb9081d072bba8930a89bce3108088f3
- SHA512 421e67af7f2c7ff74108c69dfce40b5bca429ec8d4070ff8a7bbdcbbe03a74fd5db25d7df4961cfa2a525cda8e59e88e4e7ea67e23ada11eef5cdd8905b88218
- SSDEEP 98304:dKDkfNtJRewE5zumj45qCsQBErhN9oQHbccwiYqla0AN0x0YKPwXohK+6X:dKDkf7Jy5CX5qdrh5brTs0A+x0h6kK+
- TLSH T1BDB68C43EC9149E9C1AAA230C9B69253BB717C495B3263D72B50F7382F73BC06A79714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-10_85eae18403eec58cd425725ca0d3fe0b_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_85eae18403eec58cd425725ca0d3fe0b_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_85eae18403eec58cd425725ca0d3fe0b_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 10.0MB
- SHA256 48640124ba43d5868cae40e6bbee814141385cb0c0b65321e06ba24fdde6ff66
- MD5 85eae18403eec58cd425725ca0d3fe0b
- SHA1 02c0675acb9081d072bba8930a89bce3108088f3
- SHA512 421e67af7f2c7ff74108c69dfce40b5bca429ec8d4070ff8a7bbdcbbe03a74fd5db25d7df4961cfa2a525cda8e59e88e4e7ea67e23ada11eef5cdd8905b88218
- SSDEEP 98304:dKDkfNtJRewE5zumj45qCsQBErhN9oQHbccwiYqla0AN0x0YKPwXohK+6X:dKDkf7Jy5CX5qdrh5brTs0A+x0h6kK+
- TLSH T1BDB68C43EC9149E9C1AAA230C9B69253BB717C495B3263D72B50F7382F73BC06A79714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.